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REMARKS 

Claims 2-3, 6-10, 12-20, 22, 24-35, 37-41, and 47-56 are pending, with claims 2, 16, 24, 
3 1 , and 39 being independent. Claims 1 , 4, 5, 1 1 , 21, 23, 36, and 42-46 have been canceled. 
Claims 2, 1 6, 24, 3 1 , and 39 have been amended. No new matter has been added. 
Reconsideration and allowance of the above-referenced application are respectfully requested. 

I. Rejections under 35 U.S.C. § 102 

Claims 2-3, 6-10, 12-20, 22, 24-35, 37-41, and 47-56 stand rejected under 35 U.S.C. § 
102(e) as allegedly being anticipated by U.S. Patent No. 6,694,434 to McGee et al. ("McGee"). 
These rejections are respectfully traversed. 

A. McGee 

McGee discloses a system for controlling the execution of a program. To control the 
execution of a program a second party (a trusted party) provides application registration data 
corresponding to one or more approved executable programs. The application registration data 
includes unique a first application verification data element. A client device that wishes to 
execute a program generates a second unique application verification data element, which is 
compared to the first application verification data element. If a match is found the program is 
allowed to execute. See McGee at Abstract. 

In particular, in McGee a program is initially compared against file filter criteria to 
determine whether or not the program should bypass any further procedure to determine whether 
it may be executed. See McGee at Col. 11, lines 19-32. File filter criteria is retrieved and 
examined in order to determine whether a program should be compared to application 
verification elements. As described by McGee, "this may allow core applications or operating 
system applications (which may be known to be stable, trustworthy, licensed, or pre-approved), 
to bypass the checking procedure and be granted default execution privileges immediately." 
McGee at Col. 11, lines 32-26. 
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If a program bypasses further examination based on execution of the above-described 
process, no additional process is performed. If however a program is to be examined, a unique 
application verification element of the program is used to identify if the program can be executed 
and/or if an updated version of the program exists. This process is unrelated to the file filter 
criteria process and uses a hash generated from a program for comparison against stored hash 
values to determine if the program can be opened and if a newer version of the program should 
be transmitted to the client. 

B. The Amended Independent Claims Are Allowable Over McGee 
Amended Claim 2 recites, in part: 

receiving a request to take an action with respect to a distributed electronic 
document; [and] 

identifying, in response to the request, information associated with the 
distributed electronic document, the associated information being locally stored 
and comprising user-dependent association information describing a relationship 
between the distributed document and a second electronic document different 
from the distributed electronic document; and 

identifying the second electronic document. 
(Emphasis Added). 

Amended Claim 2 is allowable over McGee because McGee fails to disclose or teach at 
least the method of identifying, in response to receiving a request, information associated with 
the distributed electronic document, the associated information being locally stored and 
comprising user-dependent association information describing a relationship between the 
distributed document and a second electronic document . 

The Examiner relies on two distinct portions of McGee - the file filter criteria, and other 
'identification data and registration data'. First, the file filter criteria relied on by the Examiner 
as reading on "information associated with the distributed document" fails to include any user- 
dependent information. The file filter information is used solely to identify whether core 
applications or operating systems can bypass the checking procedure. As provided by McGee: 

However, if an executable file open commencement request is 
detected, the processor retrieves file filter criteria as shown in block 510. File 
filter criteria may include, for example, any suitable data identifying whether 
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or not the file or executable file data designated for execution (and, hence, 
generating the open commencement request) is such a file that should be 
analyzed for being on the hash list. For example, file filter criteria may 
include the extension of files believed to be executable such as exe, java, or 
any other suitable executable file delineator. Other filter criteria may include 
where the file is located, for example in which local directory, at what 
memory address range, or on which disk partition . This may allow core 
applications or operating system applications (which may be known to be 
stable, trustworthy, licensed, or pre-approved), to bypass the checking 
procedure and be granted default execution privileges immediately. 

(emphasis added). Col. 11, lines 19-36. Because the purpose of file filter criteria is to identify 

file types or other criteria unrelated to the identity of a user, there is no reason or suggestion why 

the information associated with the document would include user-dependent information. 

The file filter criteria is distinct from the other concepts in McGee that are relied on by 

the Examiner, which are described in the Final Office Action as the 'other identification data and 

registration data' recited on Page 2 in the Final Office Action. In particular, the Examiner asserts 

that user-dependent association information that indicates a second electronic document is 

rejected based on column 6, lines 39-42 and lines 59-67. Lines 37-42 and 59-67 read as follows: 

If the registration status data and application integrity status data 32 
indicates a match in the names but not a match of the hash values, indicating 
perhaps a new version of a previously approved application, an output signal 
is generated to trigger a request for user approval to indicate approval of the 
calling application. 

For example, a calling application may only be allowed to execute at 
certain times of day, on certain hardware devices or CPUs, be restricted to 
running on behalf of specified users or userids, or be constrained to specific 
privileges or classes thereof such as read/write controls on various file 
structures or directories or any other additional capabilities or constraints by 
using constraint data beyond the mere allowance of executability. 

The above language describes that application registration data can include data such as 
users or userids. In McGee application registration data is used, when a match is found between 
application names, to generate a hash to determine if a verified application or update of that 
application exists. A match of names and/or hash values may result in execution approval of an 
application. As recited, the hash can execute on data including a userid to identify if a program 
corresponding to a user has been authorized or update for that user. This disclosure, however, 
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does not satisfy the language of the amended independent claims. The hash function described 
by McGee does not use locally stored association information , as required by the independent 
claims, to identify a second document. 

As shown in FIG. 16 of the present application (see reference 1645), the document 
control server uses association information that can include user-based association information 
(see, e.g., [0141] of the specification for support) to identify the document. In direct contrast to 
McGee, the association information is information that is distinguishable from mere user 
identity, which is relied on by the has function of McGee. The hash function permits the 
application regiatration generator 12 to act as an application verifier by using information 
incorporated into the hash received from remote clients. The hash function of McGee is used as 
an efficient mechanism to compare documents without having to access additional information - 
such as the user-based association information stored by the document control server in the 
present amended claims - for identifying a second document. 

Thus, for at least the above reasons, independent claim 2 should be allowable over 
McGee. Each of the dependent claims should be allowable based on the above arguments and 
the additional recitations they contain. Amended independent claims 16, 24, 31, and 39 should 
also be allowable for the same reasons described above with respect to claim 2. Further, each of 
their dependent claims should be allowable based on the above arguments and the additional 
recitations they contain. 

II. Conclusion 

The foregoing comments made with respect to the positions taken by the Examiner are 
not to be construed as acquiescence with other positions of the Examiner that have not been 
explicitly contested. Accordingly, the above arguments for patentability of a claim should not be 
construed as implying that there are not other valid reasons for patentability of that claim or other 
claims. 
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A notice of allowance is respectfully requested. No fees are believed due with this 
response. However, please apply any other charges or credits to deposit account 06-1050. 



Respectfully submitted, 




William R. Silverio 
Reg. No. 45,383 
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